Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130313a3a2f34382d3634203d3e20323637383233.roa
File:                     323830333a313836303a323130313a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier:          d79rpedhsbaSIOGCMsHIvv3WDNNAe2bpiNJ2Azw9TOc=
Subject key identifier:   74:F1:96:3B:CB:B6:93:11:A9:35:86:F3:14:69:D2:20:CA:22:8A:11
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       29F808229E94AE10C2725E0C10151D6BD8B1916A
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130313a3a2f34382d3634203d3e20323637383233.roa
Signing time:             Tue 03 Mar 2026 16:25:10 +0000
ROA not before:           Tue 03 Mar 2026 16:20:10 +0000
ROA not after:            Tue 02 Mar 2027 16:25:10 +0000
asID:                     267823
IP address blocks:        2803:1860:2101::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f8:08:22:9e:94:ae:10:c2:72:5e:0c:10:15:1d:6b:d8:b1:91:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Mar  3 16:20:10 2026 GMT
            Not After : Mar  2 16:25:10 2027 GMT
        Subject: CN=74F1963BCBB69311A93586F31469D220CA228A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:d3:2b:3e:61:cb:bb:bc:e4:fd:42:cf:74:
                    32:41:c2:13:a2:8c:9e:9e:4c:12:37:c1:12:4c:ec:
                    78:58:28:02:39:1a:3a:e1:f2:22:30:47:3b:a4:a7:
                    02:7e:ac:03:01:cc:f1:b3:f1:16:19:89:a0:11:f9:
                    16:a4:59:22:1c:70:78:23:8e:3f:47:9e:5e:a6:00:
                    3a:25:a3:48:c9:2f:75:60:69:3f:5d:f8:c3:80:e7:
                    fb:d4:a8:f0:ea:5f:6d:8f:4a:03:1f:65:b7:ac:03:
                    80:d6:16:c6:3a:5c:57:bf:fc:8c:be:b1:f6:a8:9a:
                    84:0f:5c:4e:3f:db:49:1c:12:43:83:1c:9f:6d:f6:
                    0b:3a:97:17:d8:51:4c:77:43:17:d7:12:73:04:07:
                    7c:5a:ae:60:1a:95:78:bb:98:03:99:37:22:f4:31:
                    b0:58:bb:42:b2:e0:90:da:97:c3:ff:1e:39:c4:f6:
                    46:a4:f7:1c:0b:09:e6:13:b2:0c:86:d5:1a:dd:33:
                    ab:cc:78:d6:55:bb:dd:30:53:cd:50:98:c4:e0:a3:
                    51:d0:ee:40:37:71:ae:d3:46:cf:29:af:2e:5a:b7:
                    63:a0:ba:7d:81:86:27:a2:13:ce:9a:aa:59:6e:ea:
                    3e:e2:36:16:a1:7c:85:3f:38:bd:13:99:6b:7e:79:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F1:96:3B:CB:B6:93:11:A9:35:86:F3:14:69:D2:20:CA:22:8A:11
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130313a3a2f34382d3634203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:2101::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:f0:bb:59:14:56:2f:e5:48:41:ad:34:05:cc:5f:9c:d4:1c:
         e1:37:e3:ec:cc:14:25:ef:f9:ee:2f:e9:a7:69:c0:a8:58:6f:
         f8:29:c5:be:ae:67:c9:49:25:06:73:d7:58:8b:84:d5:e2:f6:
         77:20:cd:f7:d0:0b:ca:4f:78:7e:18:04:0b:23:b0:a0:be:87:
         66:b5:da:86:85:c9:60:1a:2f:2f:e4:4a:59:5d:29:50:17:62:
         22:62:46:47:33:66:4a:03:22:22:8c:bc:d7:6f:4c:11:83:91:
         91:03:ec:ca:9d:c8:c7:2f:7a:54:77:78:00:32:dc:0d:92:b3:
         bc:32:60:7b:c7:43:0c:c3:19:37:5e:a5:fe:2e:63:9a:7e:cc:
         94:4d:50:d3:47:7a:f9:6f:8b:f1:82:17:10:83:e6:e3:b5:f4:
         4a:72:97:90:4b:8f:f1:48:04:c0:f8:43:7f:c5:61:38:36:cc:
         d0:6c:4d:7f:98:8f:e4:14:d8:21:7e:5c:14:48:fb:48:05:9f:
         d9:3b:32:c3:f2:ef:78:6b:6c:de:cd:71:2e:1a:98:33:90:4c:
         0b:80:d9:56:c9:35:b9:1a:52:69:26:0a:2d:bc:b3:bb:b2:61:
         dd:7e:d3:a5:cf:77:b1:b9:5b:a0:ba:5c:4d:f6:2e:36:e5:a1:
         01:18:22:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:23 2026 by rpki-client